[email] [phish] You've received a question about your ioffer item Brand New Nikon D80 Package, 2 Lens,4GB and more..

[Hal Murray]

This junk came from:
200.123.156.77 => customer123-156-77.iplannetworks.net, No forward DNS
200.123.144.0 - 200.123.159.255 is assigned to iplan.com.ar (AR)
200.123.156.77 is listed at: PSBL, UCEPROTECT-1
PSBL says:
Listed in PSBL, see
http://psbl.surriel.com/listing?ip=200.123.156.77
UCEProtect says:
IP 200.123.156.77 is UCEPROTECT-Level 1 listed.
See http://www.uceprotect.net/rblcheck.php?ipr=200.123.156.77
iplan.com.ar is listed at RFC-Ignorant.org (abuse and whois)

The spamvertized web host is:
211.174.180.6 => No reverse DNS
211.174.180.0 - 211.174.180.255 is assigned to elim.net (KR)
211.172.0.0 - 211.199.255.255 is assigned to KRNIC (KR)
211.174.180.6 is listed at: KSN (Korea)
KSN says:
Blocked due to spam, see
http://korea.services.net/blocked.phtml?addr=211.174.180.6
elim.net is listed at RFC-Ignorant.org (abuse, postmaster, and whois)

It was working a few minutes ago.

------- Forwarded Message

Return-Path: <nor...@ioffer.com>
[local routing snipped]
Received: from [200.123.156.77] (HELO litvak-exchange.litvakyasoc.com.ar)
by fe.mail.megapathdsl.net (CommuniGate Pro SMTP 5.1.10)
with ESMTP id 559146087 for xx...@megapathdsl.net; Thu, 15 Jan 2009 19:06:31
-0800
Received-SPF: softfail
receiver=fe.mail.megapathdsl.net; client-ip=200.123.156.77;
envelope-from=nor...@ioffer.com
Received: from User ([71.206.160.201]) by litvak-exchange.litvakyasoc.com.ar
with Microsoft SMTPSVC(6.0.3790.3959);
Fri, 16 Jan 2009 01:05:56 -0300
From: "nor...@ioffer.com" <nor...@ioffer.com>
Subject: You've received a question about your ioffer item Brand New Nikon
D80 Package, 2 Lens,4GB and more..
Date: Thu, 15 Jan 2009 22:06:25 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1250"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <LITVAK-EXCHAN...@litvak-exchange.litvakyasoc.com.ar>
X-OriginalArrivalTime: 16 Jan 2009 04:05:57.0109 (UTC)
FILETIME=[BBC5A250:01C9778F]
To: undisclosed-recipients:;

<P>Dear member,</P>
<P>You have a question from maildirect1 regarding the item Brand New Nikon
D80 Package, 2 Lens,4GB and more....! </P>
<P>Click below to see the question and respond:<BR><A
href="http://211.174.180.6/icons/small/login?SignIn&amp;co_partnerId=2&amp;pUs
erId=&amp;siteid=0&amp;pageType=&amp;pa1=&amp;i1=&amp;bshowgif=&amp;UsingSSL=&
amp;ru=http%3A%2F%2Fwww.ebay.com&amp;pp=&amp;pa2=&amp;errmsg=&amp;runame=&amp;
ruparams=&amp;ruproduct=&amp;sid=&amp;favoritenav=&amp;confirm=&amp;ebxPageTyp
e=&amp;existingEmail=&amp;isCheckout=&amp;migrateVisitor=" target=_blank
rel=nofollow><FONT color=#003399>View the dispute thread to respond</FONT></A>
. <BR></P>
<P><BR>**THIS IS AN AUTOMATED EMAIL - PLEASE DO NOT REPLY**</P>

------- End of Forwarded Message

--
These are my opinions, not necessarily my employer's. I hate spam.

--
All postings to news.admin.net-abuse.sightings are unconfirmed and unverified
unless stated otherwise by the moderators. All opinions expressed above are
considered the opinions of the original poster, not the moderators or their
respective employers. For a copy of the guidelines to this group, see:
http://www.killfile.org/~tskirvin/nana/